Comment 0 for bug 1271349

Revision history for this message
Matthew Farrellee (mattf) wrote : USE_NAMESPACE requires savanna-api be run as root

The USE_NAMESPACE code, which tells savanna-api to setup a proxy into a tenant netns for communication w/ instances, uses 'ip netns exec' as part of its implementation.

root (superuser) privileges are required to successfully run 'ip netns exec', which means savanna-api must be run with such privs instead of a preferred lower-priv daemon account.